$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/aUPBmSYckujzWFCpAqcagLIyJIQ.roa File: aUPBmSYckujzWFCpAqcagLIyJIQ.roa (raw, json) Hash identifier: zaUMKdTFnBWpJRPsau3JTrnWnWPxwSB/bzIaxD7AaIg= Subject key identifier: 69:43:C1:99:26:1C:92:E8:F3:58:50:A9:02:A7:1A:80:B2:32:24:84 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1431 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/aUPBmSYckujzWFCpAqcagLIyJIQ.roa Signing time: Fri 22 Aug 2025 09:00:09 +0000 ROA not before: Fri 22 Aug 2025 09:00:09 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9674 IP address blocks: 211.77.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5169 (0x1431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:09 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6943C199261C92E8F35850A902A71A80B2322484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dd:5d:3a:4b:f6:47:05:18:97:5e:93:7f:73: cb:b7:35:0e:5e:c4:8e:fb:25:4e:0c:c0:45:d6:87: fb:ec:15:54:f7:6a:8d:f0:50:5e:48:6e:14:f8:66: 7e:b9:54:81:d7:7a:2b:0a:0a:a4:de:80:bf:5e:d6: cc:4f:ff:d8:89:e5:62:7e:63:87:27:a4:01:53:68: 3e:33:04:20:ce:a2:ec:ea:c6:13:02:38:78:cc:22: dc:f9:45:74:fd:72:67:4b:e0:dc:94:49:80:fa:99: 0a:a1:20:4e:aa:4e:e4:55:61:fd:8b:cf:ef:e5:0a: 77:72:88:6a:02:c6:d4:b2:f4:b3:6f:21:20:09:19: da:8f:82:e5:93:c2:1b:55:90:a4:63:0e:6a:79:d9: fe:2d:55:1b:0e:89:09:71:06:7a:0c:57:96:cb:b1: 8d:e0:a6:bc:e7:ed:3a:be:1d:5c:b8:8d:9d:b2:46: ab:79:f3:26:94:a4:3a:54:a6:51:7e:a1:55:c9:3f: be:ad:95:e3:be:6e:6f:d9:a4:1e:cb:a6:19:67:84: ff:cb:44:ce:fa:b0:f4:f5:76:2b:fa:2c:bf:61:c7: 32:ee:da:1b:1b:db:cb:b1:c1:71:6b:2f:c1:cd:1d: 2b:8d:4a:c8:dd:aa:0f:4c:3d:74:f4:43:2c:13:ed: 21:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:43:C1:99:26:1C:92:E8:F3:58:50:A9:02:A7:1A:80:B2:32:24:84 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/aUPBmSYckujzWFCpAqcagLIyJIQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.77.0.0/16 Signature Algorithm: sha256WithRSAEncryption 73:a0:5d:76:8f:0e:f2:b8:04:1e:ea:f2:ba:2e:c3:48:7c:e0: 96:6f:10:65:6e:56:14:7e:4b:17:3e:b8:0b:be:68:bd:5e:a5: 62:ae:22:e1:2f:97:8b:f9:d8:07:70:5c:98:5a:9c:6e:7c:6f: 98:7e:78:f6:d7:00:48:9f:18:45:c4:67:3d:d3:85:2e:2c:b6: b8:c8:1a:a6:5f:54:a2:4f:55:a6:a9:42:ea:4b:a7:23:40:af: b3:12:49:10:de:b1:75:e0:74:75:b4:0e:85:26:81:cc:e0:bd: 28:d6:34:36:b7:da:c0:f0:27:0f:a6:d0:f4:54:35:3d:f3:59: c0:1b:79:9a:4d:20:46:c9:e9:f3:7f:45:be:41:2a:c7:7e:07: e2:f1:e1:99:c1:5a:c4:af:ed:8b:bf:3e:97:64:eb:f3:dd:dd: 1a:88:44:02:c8:4a:89:dc:38:02:00:a5:2d:dd:7a:6a:17:ee: bc:39:16:3a:46:b4:36:ca:a5:c3:14:d5:9f:d8:e4:a3:93:07: 27:39:cf:d3:f0:65:0c:5f:dd:41:f4:78:5d:f1:f7:ef:7e:da: 3c:6c:72:00:2c:b7:b3:86:25:d9:5b:98:01:d6:0a:7b:ea:1c: a4:3c:56:1d:94:58:7f:18:de:c3:a9:f4:91:cc:a7:bd:21:8e: 69:6a:a4:54 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICFDEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY5NDNDMTk5MjYxQzky RThGMzU4NTBBOTAyQTcxQTgwQjIzMjI0ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV3V06S/ZHBRiXXpN/c8u3NQ5exI77JU4MwEXWh/vsFVT3ao3w UF5IbhT4Zn65VIHXeisKCqTegL9e1sxP/9iJ5WJ+Y4cnpAFTaD4zBCDOouzqxhMC OHjMItz5RXT9cmdL4NyUSYD6mQqhIE6qTuRVYf2Lz+/lCndyiGoCxtSy9LNvISAJ GdqPguWTwhtVkKRjDmp52f4tVRsOiQlxBnoMV5bLsY3gprzn7Tq+HVy4jZ2yRqt5 8yaUpDpUplF+oVXJP76tleO+bm/ZpB7LphlnhP/LRM76sPT1div6LL9hxzLu2hsb 28uxwXFrL8HNHSuNSsjdqg9MPXT0QywT7SGhAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUaUPBmSYckujzWFCpAqcagLIyJIQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2FVUEJtU1lja3VqeldGQ3BBcWNhZ0xJ eUpJUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDTTTANBgkq hkiG9w0BAQsFAAOCAQEAc6Bddo8O8rgEHuryui7DSHzglm8QZW5WFH5LFz64C75o vV6lYq4i4S+Xi/nYB3BcmFqcbnxvmH549tcASJ8YRcRnPdOFLiy2uMgapl9Uok9V pqlC6kunI0CvsxJJEN6xdeB0dbQOhSaBzOC9KNY0NrfawPAnD6bQ9FQ1PfNZwBt5 mk0gRsnp839FvkEqx34H4vHhmcFaxK/ti78+l2Tr893dGohEAshKidw4AgClLd16 ahfuvDkWOka0NsqlwxTVn9jko5MHJznP0/BlDF/dQfR4XfH3737aPGxyACy3s4Yl 2VuYAdYKe+ocpDxWHZRYfxjew6n0kcynvSGOaWqkVA== -----END CERTIFICATE-----Generated at Sun Aug 24 14:21:05 2025 by rpki-client